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Abstract 

Full formal descriptions of algorithms making use of quantum principles 
must take into account both quantum and classical computing components 
and assemble them so that they communicate and cooperate. Moreover, to 
model concurrent and distributed quantum computations, as well as quan- 
tum communication protocols, quantum to quantum communications which 
move qubits physically from one place to another must also be taken into 
account. 

Inspired by classical process algebras, which provide a framework for 
modeling cooperating computations, a process algebraic notation is defined, 
which provides a homogeneous style to formal descriptions of concurrent 
and distributed computations comprising both quantum and classical parts. 
Based upon an operational semantics which makes sure that quantum ob- 
jects, operations and communications operate according to the postulates of 
quantum mechanics, a probabilistic branching bisimulation is defined among 
processes considered as having the same behavior. 



1 Introduction 

Quantum algorithms are frequently described by means of quantum gate networks. 
This has several drawbacks, for instance, gate networks do not allow descriptions 
of loops nor conditional executions of parts of networks. So as to overcome these 
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difficulties, a few quantum programming languages have been developed, such 
as: QCL 1121 . an imperative language designed by Bernhard Omer which aims at 
simulating quantum programs, qGCL 1 15 1 by Paolo Zuliani which allows the con- 
struction of proved correct quantum programs through a refinement method, QPL 
1131 . a functional language designed by Peter Selinger with a denotational seman- 
tics, and a few others. Several quantum A-calculus have also been developed: 
for example 1141 by Andre Van Tonder, which is based on a simplified linear A- 
calculus and 1 2 1 by Pablo Arrighi and Gilles Dowek, which is a "linear-algebraic 
A-calculus". 

Cooperation between quantum and classical computations is inherent in quan- 
tum algorithmics. Teleportation of a qubit state from Alice to Bob |4| is a good 
example of this cooperation. Indeed, Alice carries out a measurement, the result 
of which (two bits) is sent to Bob, and Bob uses this classical result to deter- 
mine which quantum transformation he must apply. Moreover, initial preparation 
of quantum states and measurement of quantum results are two essential forms 
of interactions between the classical and quantum parts of computations which a 
language must be able to express. Process algebras are a good candidate for such 
a language since they provide a framework for modeling cooperating computa- 
tions. In addition, they have well defined semantics and permit the transformation 
of programs as well as the formal study and analysis of their properties. A key 
point in their semantics is the definition of an equivalence relation on processes. 
Bisimulation is an adequate equivalence relation to deal with communicating pro- 
cesses since it relates processes that can execute the same flows of actions while 
having the same branching structure. 

Simon Gay and Rajagopal Nagarajan have also developed CQP, a language 
to describe communicating quantum processes II II . This language is based on 
7r-calculus. An important point in their work is the definition of a type system, 
and the proof that the operational semantics preserves typing. 

This paper presents first the main points of the definition of a Quantum Process 
Algebra (QPAlg). Then, examples of short quantum programs are given in section 
[5] Finally, a bisimulation among processes is defined in section|4] 

2 Quantum communicating processes 

The process algebra developed here is based upon process algebras such as CCS 
1101 and Lotos [5|. In this process algebra, basic actions are communications 
among processes (emission, denoted g \x and reception, denoted g Ix , where g 
is a communication gate) and quantum actions (unitary transformations and mea- 
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surements). To create a process from basic actions, the prefix operator "." is used: 
if a is an action and P, a process, a.P is a new process which performs a first, 
then behaves as P. 

There are two predefined processes: nil, the process that cannot perform any 
transition, and end, which performs a "^-transition" for signaling successful ter- 
mination, and becomes nil ("<5-transitions" are necessary in the semantics of se- 
quential composition of processes). 

The operators of the process algebra are: sequential composition (P ; Q), par- 
allel composition (P || Q), conditional choice ([ c\ — » Pi, . . . , c„ — > P n ]) and 
restriction (P\L ). As for sequential composition, process Q is executed if process 
P terminates successfully, that is to say if P performs a 5-transition. The process 
[ C\ — ► Pi, . . . , c n — ► P n ], where Cj is a condition and Pi a process, evolves as a 
process chosen nondeterministically among the processes Pj such that c,j is true. 
Restriction is useful for disallowing the use of some gates (the gates listed in L), 
thus forcing internal communication within process P. Communication can occur 
between two parallel processes whenever a value emission in one of them and a 
value reception in the other one use the same gate name. 

The main points of QPAlg involving the quantum world are developed in the 
rest of this section. The precise syntax and the main inference rules of the seman- 
tics are given in appendix|X] For more details, see |9 1. 

2.1 Quantum variables 

For the purpose of this paper, we consider that there are two types of variables, 
one classical: Nat, for variables taking integer values, and one quantum: Qubit for 
variables standing for qubits. An extended version of the process algebra would 
of course also include quantum registers and other types of variables. 

In classical process algebras, variables are instantiated when communications 
between processes occur and cannot be modified after their instantiation. As a 
consequence, it is not necessary to store their values. In fact, when a variable is 
instantiated, all its occurrences are replaced by the value received. 

Here, quantum variables stand for physical qubits. Applying a unitary trans- 
formation to a variable which represents a qubit modifies the state of that qubit. 
This means that values of variables are modified. For that reason, it is necessary 
to keep track of both variable names and variable states. 

Variables are declared, the syntax is: [ xi : ti,...,x n : t n . P } where 
X\, . . . ,x n is a list of variables, ti, . . . , t n are their types, and P is a process 
which can make use of these classical and quantum variables. To simplify the rest 
of this paper, the names of variables will always be considered distinct. 
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In the inference rules which describe the semantics of processes, the states of 
processes are process terms P together with contexts C, of the form P/C. The 
main purpose of a context is to maintain the quantum state, stored as q = p where 
q is a sequence of quantum variable names and p a density matrix representing 
their current quantum state. Moreover, in order to treat classical variables in a 
similar way, modifications of classical variables are also allowed. So, for the 
same reason as in the case of quantum variables, classical values are stored in 
the context. Storing and retrieving classical values is represented by functions 
/ : names — ► values. The context must also keep track of the embedding of 
variable scopes. To keep track of parallel composition, this is done via a "cactus 
stack" structure of sets of variables, called the environment stack (s), which stores 
variable scopes and types. The set of all the variables in s is denoted Var(s), "." 
adds an element on top of a stack, and "|" concatenates two stacks. 

In summary, the context has three components < s,q = p, f >, where: 

• s is the environment stack; 

• q is a sequence of quantum variable names; 

• p is a density matrix representing the quantum state of the variables in q; 

• / is the function which associates values with classical variables. 

The rules for declaration and liberation of variables are the following: 
Declaration: 



with C =< s,q = p, f >, C =< s', q = p, f > 
and s' = {(xi,ti), (x n ,t n )}.s 

This rule adds the new variable names and types on top of the stack s. Because 
the variables do not have values yet, the quantum state and the classical function 
do not have to be modified at this point. 

Evolution of a process within the scope of declared variables: 



[xi : ii,.. .,x n : t n . P]/C 



T 



[pyc 



p/c 



a 



P'/C 



[pyc 



a 



[P']/C 
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In short: if the process P can perform a transition, then the process [ P ] can 
perform the same transition, provided that the action of the transition is not S. 

Termination of a process with exit from a scope and liberation of the vari- 
ables: 

P/C S , P7 <e.s,q = p,f > 

[ P ]/C nil I < s, g\Var(e) = Tr^ {e)/q (p), /\Var(e) > 

If the action is S, this means that P has successfully terminated, so the context 
must be cleaned up by eliminating the variables having their scope limited to that 
process. These variables have their names listed in the head e of the stack. So, 
cleaning up the context means eliminating the head of the stack, removing the 
variables in e from the sequence q and from the domain of the function /. The 
new quantum state is obtained by performing a partial trace on p over the qubits 
in Var(e), which is denoted Tr v .^ e y q (p). 

2.2 Basic actions 

The classical basic actions are classical to classical communications and will not 
be further defined here. Classical to quantum communications and quantum to 
quantum communications are introduced for respectively initializing qubits and 
allowing the description of quantum communication protocols. Quantum to clas- 
sical communications are part of measurement and are dealt with in the next para- 
graph. 

The semantics of communications involving the quantum world is based upon 
the following rules concerning the quantum side of such communications: 



g \x .P/C g \x P/C 



where 

• C=<s,q = p, f > and C =< s\{x}, q\{x} = Tr {x}/q {p), f > 

• x £ Var(s) and x £ q 
and: 

glx.P/C glx P/C 

where 
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• C =< s, q = p, f >,C =< s, x.q = v ® p, / > 

• x € Var(s), x of type Qubit, x £ q 

• v density matrix of dimension 2 

The first rule deals with qubit sending, and the other one, with reception of a 
qubit. For qubit sending, because of the no-cloning theorem, the sent qubit must 
be removed from the context. The two rules concerning classical value sending 
and classical value reception are given in appendix lA.2l 

In the operational semantics of parallel composition, the combination of the 
rules for emission and reception defines communication. In a classical to quan- 
tum communication, the qubit is initialized in the basis state where v is 
the classical value sent (in this case, v must be or 1). In a quantum to quantum 
communication, the name of the sent qubit is replaced in q by the name of the 
receiving qubit. 

Other basic actions are unitary transformations which perform the unitary evo- 
lution of qubit states. Given a set U of predefined unitary transformations, the 
action corresponding to the application of U £ U to a list of quantum variables is 
denoted by U[x\, . . . , x n ]. 

The inference rule for unitary transformations is: 



U[x!,...,x n ].P/ < s,q = pj > T , P/ < s,q = p'J > 

where 

• U € U, xi, . . . ,x n € Var(s), and xi, . . . ,x n G q 

• xi, . . . ,x n are pairwise distinct 

• p' = Tu{p) 

The condition x%, . . . , x n € q prevents from applying a unitary transformation 
to qubits which have not been initialized. 

Tjj is the super-operator which must be applied to p, to describe the evolution 
of the quantum state due to the application of the unitary transformation U to the 
qubits xi, . . . , x n - In general, with Aa2 n x 2™ matrix: 

t a : p ^ ul{A o /® fc ).n.p.n f .(^ f ® /® fc ).n 

where 
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• II is the permutation matrix which places the Xi's at the head of q 

• k — size(g) — n 

• I® k = I . . . (gj J, where I is the identity matrix on C 2 

S v ' 

k 

Since the unitary transformation U may be applied to qubits which are any- 
where within the list q, a permutation IT must be applied first. This permutation 
moves the x^'s so that they are placed at the head of q in the order specified by 
[x\ , . . . , x n ] . Then U can be applied to the first n elements and / to the remainder. 
Finally, the last operation is the inverse of the permutation II so that at the end, 
the arrangement of the elements in p is consistent with the order of the elements 
in q. 

2.3 Measurement and probabilistic processes 

Last but not least, an essential basic action has to be introduced into the process 
algebra: quantum measurement. Let M be an observable in a set O of predefined 
observables, x\, . . . ,x n a list of distinct quantum variables and g a gate. The 
syntax for measurement is the following: 

• M[x\, . . . , x n ] is a measurement of the n qubits of the list with respect to 
observable M, but the classical result is neither stored nor transmitted. 

• g \M[x\, . . . , x n ] is a measurement of the n qubits of the list with respect 
to observable M, followed by sending the classical result through gate g. 

Measurement is probabilistic: more precisely, the classical result and the quan- 
tum state after measurement are probabilistic. In the case of measurement without 
communication of the classical result, only the quantum state is probabilistic after 
measurement, so the probabilities can be reflected in the density matrix: 



M[x u ...,x n ].P/ < s,q = p,f > t , P/ < 3 ,q = p',f > 

with 

• xi, . . . ,x n G Var(s), x\, . . . , x n G q and x\, . . . ,x n are pairwise distinct 

• M E O with J2i ^iPi as spectral decomposition 
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As in the case of unitary transformations, Tp. is the super-operator corresponding 
to the application of the projector Pj, to measured qubits. The computation of p' 
stems from the projective measurement postulate of quantum mechanics. 

When the value coming out of the measurement is sent out, the classical result 
is probabilistic. This requires the introduction of a probabilistic composition op- 
erator for contexts. This operator is denoted EB p : the state PjC\ EB p C2 is P/Ci 
with probability p and Pj C2 with probability 1 — p. In general, a context is either 
of the form < s, q — p, / >, or of the form EB Pi < s;, qi — Pi, fi > where the p;'s 
are probabilities adding to 1. Then, the rule for measurement followed by sending 
the classical result is: 



glM[x 1 ,...,x n ].P/C t | [g\y .end];P/m Pi Ci 

where 

• C =< s,q = p,f > 

• Q =< {(y,mt)}.s,q = p h f U {y ^ Xi} > 

• xi, . . . ,x n € Var(s), xi, . . . , x n 6 q and x\ , . . . , x n are pairwise distinct 

• y is a new variable (introduced as y : Nat by this rule) 

• M G O with \Pi as spectral decomposition 

• Pi = Tr(T Pi 0)), = J-T Pi (p) 

As explained in |6| and |7|, if a process contains both a probabilistic and a 
nondeterministic choice, the probabilistic choice must always be solved first. In 
the process algebra presented here, nondeterminism appears with parallel com- 
position and conditional choice. So as to guarantee that probabilistic choice is 
always solved first, the notion of probabilistic stability for contexts is introduced: 
a context C is probabilistically stable, which is denoted C [, if it is of the form 
< s,q = p, f >. If the context of a process state is not stable, a probabilistic 
transition must be performed first: 

Pj EB Pi Ci > Pj P/Cj ^ 
where Si — > p S2 means that state Si becomes S2 with probability p. 
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3 Examples 



In the following examples, the set U of unitary transformations is: 

U = {H, CNot, I, X, Y, Z} 

where H is Hadamard transformation, CNot is "controlled not", / is the identity, 
and X, Y, Z are Pauli operators. The set O of observables contains the observ- 
ables corresponding to measurement of one and two qubits in the standard ba- 
sis, denoted respectively M st d,i and M s td,2, and the observable corresponding to 
measurement of a qubit in the basis {|+), — )}, denoted Af + _. 

3.1 Teleportation 

Once upon a time, there were two friends, Alice and Bob who had to separate 
and live away from each other. Before leaving, each one took a qubit of the same 
EPR pair. Then Bob went very far away, to a place that Alice did not know. Later 
on, someone gave Alice a mysterious qubit in a state \ip) — a\0) + /3|1), with a 
mission to forward this state to Bob. Alice could neither meet Bob and give him 
the qubit, nor clone it and broadcast copies everywhere, nor obtain information 
about a and (3. Nevertheless, Alice succeeded thanks to the EPR pair and the 
teleportation protocol 1 4 1 : 

[ x : Qubit, y : Qubit . 

((gi Ix .32 ?y .H[x].CNot[x, y].end) 
|| (01 !0. 52 \0.end))\{ gi ,g 2 } 

] 

Alice = [ x : Qubit, y : Qubit . 

CNot[x, y].H [x].meas \M st d 2[x, y] .end 

] 



BuildEPR = 
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Bob = [z: Qubit 



[ k : Nat . 

meas ?k . 

[ k = — > I[z].end, 
k = 1 — > X[z].end, 
k = 2^ Z[z].end, 
k = 3 -> Y[z].end] 



Qubit . 

[ a : Qubit, 6 : Qubit . 
BuildEPR[a, 6] ; 

( Alice [-0, a] || Bob[b])\{meas} 

] 

The inference rules can be used to show that this protocol results in Bob's z 
qubit having the state initially possessed by the x qubit of Alice, with only two 
classical bits sent from Alice to Bob. 



Teleport = [ ip : 



] 



3.2 Communication protocols 

Alice sends qubits to Bob through a non secure channel and Eve eavesdrops this 
channel to get information on the qubits sent by Alice. In the following example 
A, B, and E are processes modeling whatever Alice, Bob, and Eve may respec- 
tively apply to their qubits. The actions of these processes, which are not made 
explicit here, will be specified in the next example of the BB84 protocol. 

The communication protocols which are described here could be used to mo- 
del cryptographic protocols so as to check if they are secure. 

Eve intercepts all qubits 

Eve intercepts qubits because of a flaw in the channel that Alice and Bob are using 
to communicate. 

def 

Alice = [a : Qubit . A [a] ;fill \a .end ] ; Alice 
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Bob = [ b : Qubit . empty ?6 .B[b] ] ; Bob 

Eve = [ e : Qubit, / : Qubit . 

emptyFlaw ?e .E[e, /] ;fillFlaw !/ .era/ 
];Eve 

Flaw =' [ u : Qubit, v : Qubit . emptyFlaw \u .fillFlaw Iv .end] 

def 

Channel = [ x : Qubit, y : Qubit .fill Ix .Flaw[x, y] ; empty \y .end] ; 
Channel 

Protocol = (Alice | Bob | Eve || Channel) 

\{fill, empty, fillFlaw, emptyFlaw} 

Eve intercepts some of the qubits 

This part assumes that a nondeterministic process composition P+Q is introduced 
in the process algebra. This operator is not presented in the operational semantics 
in appendix lA.2l but it can be simulated by [ true —> P, true — > Q ] . 

To model the fact that Eve does not succeed in intercepting all qubits, the flaw 
in the channel is made nondeterministic: 

Channel = f [x : Qubit . 

fill Ix . 

( 

[ y : Qubit . Flaw [a; , y] ; empty \y .end] + 
(empty \x .end) 

) 

] ; Channel 
3.3 The BB84 protocol 

The BB84 protocol [3 1 is a protocol for secure quantum key distribution: Alice 
and Bob must agree on a private key, i.e. a list of bits that should remain secret. 
To communicate, they send qubits through a non secure channel. In fact, the 
processes A and B left unspecified in the previous paragraph can be used to model 
this protocol. The process Alice is redefined and the process B used by Bob is 
made explicit. In addition, another process is defined: the process Random which 



11 



initializes a bit randomly at or 1. The gates keepDataA and keepDataB are used 
by Alice and Bob respectively to send the bits that they want to keep. 



Alice = f [a: Qubit, dataA : Nat, baseA : Nat . 

Ai [a, dataA, baseA] ;fill \a A2 [dataA, baseA] 
] ; Alice 

Random = [ r : Nat . 

[ x : Qubit . 

(g !0 .end \\ g Ix .end)\{g} ; 
H[x\. 

(h !M std ,i[a;] .end || h 1r .end)\{h} 



Ai = [a : Qubit, dataA : Nat, baseA : Nat . 
Random [dataA] [a] ; 
Random [baseA] ; 
[baseA = 1 — > H[a].end] 



def 



dataA : Nat, baseA : Nat . 
[ bool : Nat, ok : Nat . 
received lok . 
base \baseA . 
keep Ibool . 

[ bool = 1 — > keepDataA \dataA .end] 



} 
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B = [ b : Qubit . 

[ baseA : Nat, baseB : Nat, dataB : Nat . 
Random [baseB] ; 

( 

[ baseB — — > g \M st d,i[b) .end, 
baseB = 1 -► g \M+-[b] .end] 
|| g ? dataB .end 

)\{g) ; 

received ! 1 . 
foflie IbaseA . 

[ baseA — baseB —> keep ! 1 .keepDataB IdataB .end, 
baseA ^ baseB — > fee/7 !0 .enc/] 



4 Probabilistic branching bisimulation 

The operational semantics associates a process graph with a process state. A pro- 
cess graph is a graph where vertices are process states and edges are transitions 
labeled with actions or probabilities. Each process graph has an initial state. 

A bisimulation is an equivalence relation on process states. It identifies states 
when they are associated with process graphs having the same branching structure. 

The bisimulation defined here is probabilistic because of probabilities intro- 
duced by quantum measurement and branching because some transitions are con- 
sidered as silent. It is inspired from the definitions in |8 1 and [ 1 1. 

4.1 Preliminary definitions and notations 

Process states 

The set of all possible process states is denoted 8. Let S,T g §, then S can be 
written P/Cp and T, Q/Cq where P, Q are process terms and Cp, Cq contexts 
(possibly probabilistic). 

Assuming that S — P/Cp and Cp =< s, q — p, f >, if x is a qubit in S 
and x 6 q, then is the state of x and this state can be obtained with a trace out 
operation on p: 

Px = Tr {x}/q{P) 
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Silent transitions 

The transitions considered as silent are of course internal transitions ( ) but 
also probabilistic transitions. The reason is that we want, for example, the follow- 
ing states Si and 52 to be equivalent. 




Silent transitions will be denoted ~+. stands for a sequence (possibly 
empty) of silent transitions. 

Function /j, 

Probabilistic transitions are considered silent, nonetheless, in two equivalent sta- 
tes, the corresponding actions that can be performed on both sides must occur with 
the same probability. 

Let = be an equivalence on process states, 5 be a process state and S, its 
equivalence class with respect to =. If M is a set of process states and S a state, 
then S > M means that there exists a sequence of transitions remaining in M U S, 
from S to a state of M. 

A function fi= : § x 7>(S) — > [0, 1] is defined for computing the probability to 
reach a state in the set M from a state S without leaving SUM. It should be noted 
that, for this function to yield a probability, nondeterminism must be eliminated 
in a way which allows the computation of /U. Here, nondeterminism is treated as 
equiprobability, but this is just a convention for the definition of /i= . For example, 
it does not imply the equivalence of the following two process states: 




T 
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A bisimulation is an equivalence relation = which must verify some proper- 
ties, among which: if S = T then p,= (S, M) = p,= (T, M) for all M equivalence 
class of =. In this case, H=(S, M) is the probability to perform an action. 

The function fi= is defined by: 

• if S e M then//=(S,M) = 1 



• else if 3T e MUS such that S 1 — > p T>M 
thenlet^s = {R G AfUS 1 1 S 1 — > Pj? R>M} 
in 



l*=(S,M) 



]T P R ^(R,M) 
ReE s 



• else if 3 T e M U S such that 5 -^-> T> M 
then let £ s = e M U S | S ^ R> M} in 



ReE s 




• else n={S,M) = 



Equivalence of contexts 

Let cr be a renaming on variables. The extensions of a to environment stacks and 
sequences of quantum variables are also called a. 

Let C =< s,q ~ p, f > and C" =< s', = p' , /' > be two contexts, C and 
C" are equivalent, if and only if there exists a renaming a such that: 

• a(s) = s' 

• 3 a permutation n such that n(a(q)) = q' and ir(p) = p' 

• Vie dom(/), a(x) e dom(/') and /(a;) = /'(cr(a;)) 

. Vy e dom(/'), CT" 1 ^) e dom(/) and /(a" 1 ^)) = /' (y) 

This equivalence relation can easily be extended to probabilistic contexts. 
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4.2 Probabilistic branching bisimulation: definition 

An equivalence relation is a probabilistic branching bisimulation if and only if: 

• if S and T are equivalent and if an ac- 
tion a can be performed from S, then the 
same action can performed from T, pos- 
sibly after several silent transitions; 

• the reached states (S' and T") are equiv- 
alent; 

• the action a must occur with the same 
probability in both cases. 

Let = be an equivalence relation on process states. = is a probabilistic branch- 
ing bisimulation if and only if it satisfies: 

• Termination 

if S = T and S S' then 

3 V, T" such that (T ^* T T" A S = V A S' = T") and the 
contexts in 5" and T" are equivalent 

• Value sending 

if S = T and 5* S' (v classical value) then 

3 T", T" such that (T ~>* V T" A S = T A S' = T") 

• Qubit sending 

if S = T and S 9 -^> S' (x variable) then 

3 T', T" such that (T ~>* T 9 -X T" A p% = p T y A S = V A S' = T") 

• Value reception 

if S = T and S S' (v classical value) then 

3 V, T" such that (T ~»* T' ^> T" A S = T A 5" = T") 

• Qubit reception 

if S = T and S — 5- 5" (a; variable) then 

3 T', T" such that (T ^* T' T" A pf = A 5 = T' A S' = T") 
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• Silent transition 

if S = T and S — S' then S' = T 



• Probabilities 

if S = T then n=(S,M) = n=(T,M), VM e (§/ =)\{S} 

4.3 Bisimulation and recursion 

Recursion in a process definition introduces circuits in the associated process 
graph. As a consequence, it must be proved that in this case, the notion of prob- 
abilistic branching bisimulation is well-defined. In fact, the only point that could 
be a problem is the definition of [i=. 

Let S be a process state and M be a set of process states, the computation of 
\±= (T, M) for all T in S leads to a linear system of equations where the fi= (T, M) 
are the unknowns: 

X = AX + B 

The i th row in this system can be written: Xi = auXi + ■ ■ ■ + di n x n + fy. 

The coefficients and 6, are either probabilities or average coefficients in 
the case of nondeterminism. As a consequence: < < 1 and < 6» < 1. 
Moreover, in the definition of fi=, every state in the set Eg is such that there exists 
a path from that state to the set M. Therefore, the system of equations obtained 
can be transformed into a system such that 6j > 0, V« G [1, n]. From now on, we 
consider that the system verifies this property. 

Another property of the system is: < 5ZjO»j+6j < 1, thusO < J2j a ij < 1- 

To prove that the system has a unique solution, it is sufficient to prove || A \\ < 1 
and use the fixpoint theorem. The norms for matrices and vectors are: 

||A||= sup \\AX\\ || JSC || = max |^| 
11*11=1 

We obtain: 

\\AX\\ = max\^2a,ijXi\ < max^(|ay||a;j|) 

j 3 

and then ||A|| < max^ |a,j| < 1 

3 

\\A\\ < 1 implies that the function / :Ih AX + B is strictly contracting, so 
from the fixpoint theorem, we infer that the equation X = AX + B has a unique 
solution. Moreover, as /([0, 1]) C [0, 1], this solution belongs to [0, 1]. 

As a consequence, the function /j,= is well-defined even in case of recursive 
processes. 
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5 Conclusion 



This paper has presented a process algebra for quantum programming which can 
describe both classical and quantum programming, and their cooperation. With- 
out this cooperation, the implementation of protocols like BB84 is not possible. 
Another feature of this language is that measurement and initialization of quantum 
registers occur through communications between quantum and classical parts of 
the language, which happens to be a faithful model of physical reality. 

Moreover, a thorough semantics has been defined, thus allowing the study 
and analysis of programs. One peculiarity of this semantics is the introduction 
of probabilistic processes, due to quantum measurement. Probabilistic processes 
perform probabilistic transitions. As a consequence, the execution tree obtained 
from a process presents action branches and probabilistic branches. 

Finally a semantical equivalence relation on processes has been defined. This 
equivalence is a bisimulation which identifies processes associated with process 
graphs having the same branching structure. This is the first step toward the veri- 
fication of quantum cryptographic protocols. 

Several extensions are possible. As already mentioned, a nondeterministic 
process composition operator can be introduced. A probabilistic composition of 
processes could be added. This would allow, for example, the description of com- 
munication protocols in which Eve intercepts qubits with a given probability. 

References 

[1] S. Andova. Process algebra with probabilistic choice. Lecture Notes in 
Computer Science, 1601:111-129, 1999. 

[2] P. Arrighi and G. Dowek. Operational semantics for formal tensorial calcu- 
lus. Proceedings of The 2nd International Workshop on Quantum Program- 
ming Languages, pages 21 - 38, July 2004. 

[3] C. H. Bennett and G. Brassard. Quantum cryptography: Public -key distribu- 
tion and coin tossing. In Proceedings of the IEEE International Conference 
on Computer, Systems and Signal Processing, pages 175-179, Bangalore, 
India, December 1984. 

[4] C. H. Bennett, G. Brassard, C. Crepeau, R. Jozsa, A. Peres, and W. Wootters. 
Teleporting an unknown quantum state via dual classical and EPR channels. 
Physical Review Letters, 70:1895-1899, 1993. 



18 



[5] T. Bolognesi and E. Brinksma. Introduction to the ISO specification lan- 
guage LOTOS. Computer Networks and ISDN Systems, 14(l):25-59, 1987. 

[6] D. Cazorla, F. Cuartero, V. Valero, and F. L. Pelayo. A process algebra 
for probabilistic and nondeterministic processes. Information Processing 
Letters, 80(l):15-23, 2001. 

[7] D. Cazorla, F. Cuartero, V. Valero, F. L. Pelayo, and J. Pardo. Algebraic 
theory of probabilistic and nondeterministic processes. The Journal of Logic 
and Algebraic Programming, 55(l-2):57-103, 2003. 

[8] W. Fokkink. Introduction to Process Algebra. Springer, 2000. 

[9] M. Lalire and Ph. Jorrand. A process algebraic approach to concurrent 
and distributed quantum computation: operational semantics. Proceedings 
of The 2nd International Workshop on Quantum Programming Languages, 
pages 109-126, July 2004. 

[10] R. Milner. Communication and Concurrency . Prentice-Hall, London, 1999. 

[11] R. Nagarajan and S. Gay. Communicating quantum processes. Proceedings 
of The 2nd International Workshop on Quantum Programming Languages, 
pages 91- 107, July 2004. 

[12] B. Omer. Quantum programming in QCL. Master's thesis, Institute Infor- 
mation System, Technical University of Vienna, 2000. 

[13] P. Selinger. Towards a quantum programming language. To appear in Math- 
ematical Structures in Computer Science, 2003. 

[14] A. Van Tonder. A lambda calculus for quantum computation. Los Alamos 
arXive e-print quant-ph/0307 1 50 , 2003. 

[15] P. Zuliani. Quantum Programming. PhD thesis, St Cross College, University 
of Oxford, 2001. 



19 



A The quantum process algebra 
A.l Syntax 



process 



action ::= 

I 
I 

communication ::= 

I 
I 

unitjransf ::= 
measurement ::= 
varjiecl ::= 

procjdef ::= 



nil 
end 

action . process 
process ; process 
process || process 
process \{ gatedist } 
[ condJist ] 

[ varjdecldist . process ] 
process Jiame [[ varJist ]] 

communication 

unitjransf 

measurement 

gate ! exp 

gate ! measurement 
gate ? variable 

unitary .operator [ varJist ] 

observable [ varJist ] 

variable : varjype 

def 

process jiame — process 



A.2 Main inference rules of the semantics 

The semantics is specified with inference rules which give the evolution of the 
states of processes. There are four kinds of transitions: 



• action transition: 

• silent transition: 



+ where a is g \x or g Ix ; 
, for internal transition; 



• delta transition: 



, for successful termination; 
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• probabilistic transition: — > p , where p is a probability. 

In the following, P, <3, P', C, P, and P[ are processes, C, C and C are 
contexts, a is an action, g is a communication gate, v is a value, a; is a variable, 
and Cj is a condition. 



Successful termination 



end/C S nil/C 

Action Prefix 



Ci 



g \v .P/C g \v P/C 



« e JV, c | 



5 b .P/C <? \f(x) P/C 



where C =< s,q = p, f >, x e Var(s) and a; G dom(/) 



5 !a; .P/C g_b P/C 

where 

• c=<s,q = p,f >, C =< s\{a;}, = Tr {x}/q (p), f > 

• x € Var(s) and iG? 



5 ?a: .P/C g?7; P/C 

where 

• C =< s,q = p,f >, C =< s, g = p, / U {x \r+ v} > 

• x £ Var(s), x of type Nat, v £ IN 



g Ix .P/C glx P/C 

where 

• C =< s,q = p, f >, C =< s, x.q = v <g> p, / > 

• a; € Var(s), x of type Qubit, a; ^ q 
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• v density matrix of dimension 2 

U\x 1 ,...,x n ].P/C t , P/C 

where 

• C=<S,q = p,f >, C" =< s, q = pf, f > 

• U e U, x\ , . . . , x n G Var(s), and £1 , . . . , x n e <7 

• V z, j G {0, . . . , n} such that i ^ j : Xi ^ Xj 

• p' = Tu(p) 

T is defined in the following way: if A is a 2™ x 2™ matrix, then 

t a ■. P ^ nl(A <g> /® fe ).n.p.nt.(At ® /® fc ).n 

where II is the permutation matrix which places the Xi's at the head of q, and 

k = size(g) — n . 



M[xx,...,x n ].P/ < s,q = p,f > t , P/<s,q = p,f> 

with 

• x\ , . . . , x n e Var(s) and zi , . . . , x n e q 

• V i, j £ {0, . . . , n} such that i ^ j : x% ^ rcj 

• M e O with J2i ^iPi as spectral decomposition 

g\M\x 1 ,...,x n ].P/C t, [g!y.enrf1;P/ffl p< Ci 

where 

• C =< s, q = p, f > (which implies C J.) 

• Q=< {(y,~Nat)}.s,q = pi,fU{yi-^ \i} > 

• Xi , . . . , x n S Var(s) and £1 , . . . , x n e q 
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• V i, j £ {0, . . . , n} such that i =/= j : xi ^ xj 

• y is a new variable 

• MeO with A^Pi as spectral decomposition 

• pi = Tr(T Pi (/?)), p l = -3-T Pi (p) 



Probabilistic contexts 



-P/ Hp; Ci > p J - -P/ 

Sequential composition 



where = 1 



P/C a P'/C 
P;Q/C PP P';Q/C a ^ S 

P/C S P'/C 



P;Q/C _jt^ Q/C 

Parallel composition 

In the rules for parallel composition, C, Cp and Cq are defined as: 

• C =< (s P || s Q ).s,q = p,f > 

• C P =< s P \s,q = p,f> 

• Cq =< s Q \s,q = pj> 

In the definition of C, the operator || permits to build a cactus stack (see para- 
graph l2~TV In the cactus stack (sp || sq).s of the process P \\ Q, the names in s 
correspond to variables shared by P and Q whereas the names in sp (resp. sq) 
correspond to variables declared in P (resp. Q). 

P/Cp a P'/C'p 

p II QIC P'WQ/c a ^ S 

where 

• If Cp =< s\q' = p',f > thenC" =< (s' p || s Q ).s,cf = p'J' > with 
s' P such that s' = s' p \s (P can neither add to nor remove variables from s) 
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• If C'p = m Pi < s'^q'i = p'iJl > thenC = ffl Pi < (s P ' t \\ 8 Q ).a,^ = 
p-, // > with sp- such that = sp'^s 

P/Cp g\v P'/C'p Q/C Q g?v Q'/C' Q 

p\\Q/c t ; P'WQ'/c^ 

where v e N,C' Q =< s' , q' = p', f >, and C =< {s P \\ s Q ).s, q = p, f > 

P/Cp g\v P'/C' P Q/C Q glx Q'/C'Q 
PWQ/C r P'WQ'/C 

where 

• x e Var(s) U Var(sg), x of type Qubit, x ^ q, v e {0, 1} 

• C =< (s P || s Q ).s,x.q = \v)(v\ ® p,f > 

P/Cp glx P'/C'p Q/C Q g?y Q'/C' Q 

pwQ/c r ; p'wq'/c^ 

where 

• x € Var(s) U Var(sp), x e g 

• y€ Var(s) U Var(sQ), y ^ q,y of type Qubit 

• C" =< ((s P || s ).s)\{s}, g[x <- y] = p, f > 

P/Cp P'/C'p Q/C Q Q'/C'q 

P || Q/C S , »///C" 

with C =< s, q\e = Tr e / q (p), f\e > and e = (Var(s P ) U Var(sg)) 
Variable declaration 

[ X\ '. 1 1 , . . . , x n '. t n . 

P\IC _r [P]/C 

with C =< s, g = p, / >, C" =< s', q = p,f> 
and s' = {(xi, ii), . . . , (x n ,t n )}.s 
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End of scope of variables 

P/C a P'/C 

[p]/c IZI [rW 

P/C 5 ! P'/<e.s,q = p,f> 

[P]/C 5 ; W i7/<8,g\Var(e)=rrv ar(eVo (p),/\Var(e)> 
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